Skip to content

Commit a8fdf4d

Browse files
add security context user for services (#22)
1 parent 13d2d81 commit a8fdf4d

File tree

3 files changed

+52
-29
lines changed

3 files changed

+52
-29
lines changed

charts/service/templates/deployment.yaml

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,10 @@ spec:
1616
labels:
1717
app: {{ .Values.name }}
1818
spec:
19+
securityContext:
20+
{{- if and (hasKey .Values.volumeMounts "pvc") (not (empty .Values.volumeMounts.pvc)) }}
21+
fsGroup: 1000
22+
{{- end }}
1923
{{- if .Values.imagePullSecrets}}
2024
imagePullSecrets:
2125
{{- range $v := .Values.imagePullSecrets }}
@@ -78,12 +82,17 @@ spec:
7882
containers:
7983
- name: {{ .Values.name }}
8084
image: {{ .Values.image }}
81-
{{- with .Values.Containers }}
82-
{{- if .privileged | default false }}
85+
8386
securityContext:
87+
{{- with .Values.Containers }}
88+
{{- if .privileged | default false }}
8489
privileged: true
85-
{{- end }}
86-
{{- end }}
90+
{{- end }}
91+
{{- end }}
92+
{{- if and (hasKey .Values.volumeMounts "pvc") (not (empty .Values.volumeMounts.pvc)) }}
93+
runAsUser: 1000
94+
runAsGroup: 1000
95+
{{- end }}
8796
ports:
8897
- name: http-port
8998
containerPort: {{ .Values.httpPort }}

docs/index.yaml

Lines changed: 39 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ entries:
33
cron-job:
44
- apiVersion: v1
55
appVersion: "1.0"
6-
created: "2024-11-22T01:48:35.067046+05:30"
6+
created: "2024-11-29T10:36:43.782039+05:30"
77
description: Helm chart creates a cron-job, service, alerts along with serviceMonitor
88
etc
99
digest: 12ef691b470c85021dea5a2abb22ed85a1eeb0eebb639b4e961ebc9e48b77379
@@ -17,7 +17,7 @@ entries:
1717
version: v0.0.6
1818
- apiVersion: v1
1919
appVersion: "1.0"
20-
created: "2024-11-22T01:48:35.066742+05:30"
20+
created: "2024-11-29T10:36:43.781747+05:30"
2121
description: Helm chart creates a cron-job, service, alerts along with serviceMonitor
2222
etc
2323
digest: feacad697b021e3101356c723937a67384ce40b20d8262f8cb0dccb778ce3409
@@ -31,7 +31,7 @@ entries:
3131
version: v0.0.5
3232
- apiVersion: v1
3333
appVersion: "1.0"
34-
created: "2024-11-22T01:48:35.066139+05:30"
34+
created: "2024-11-29T10:36:43.781031+05:30"
3535
description: Helm chart creates a cron-job, service, alerts along with serviceMonitor
3636
etc
3737
digest: a0b223548907a6e97153e62a80c71fa20a2d1b44d6ddd6f86c99ee1d0bded277
@@ -45,7 +45,7 @@ entries:
4545
version: v0.0.4
4646
- apiVersion: v1
4747
appVersion: "1.0"
48-
created: "2024-11-22T01:48:35.065693+05:30"
48+
created: "2024-11-29T10:36:43.780647+05:30"
4949
description: Helm chart creates a cron-job, service, alerts along with serviceMonitor
5050
etc
5151
digest: 915559e842b254eb709dae62904e6021123d76fba00367c0f676ea471fd9bb34
@@ -59,7 +59,7 @@ entries:
5959
version: v0.0.3
6060
- apiVersion: v1
6161
appVersion: "1.0"
62-
created: "2024-11-22T01:48:35.064919+05:30"
62+
created: "2024-11-29T10:36:43.780351+05:30"
6363
description: Helm chart creates a cron-job, service, alerts along with serviceMonitor
6464
etc
6565
digest: 8647eaeb33477970ec574dfea3549f71d480bb89cac42b99fba36a4f56d2c64f
@@ -73,7 +73,7 @@ entries:
7373
version: v0.0.2
7474
- apiVersion: v1
7575
appVersion: "1.0"
76-
created: "2024-11-22T01:48:35.064516+05:30"
76+
created: "2024-11-29T10:36:43.780017+05:30"
7777
description: Helm chart creates a cron-job, service, alerts along with serviceMonitor
7878
etc
7979
digest: d8ab447cd5bff82957fc1bafdd4a1bdab91cea3b9eba179f17359d4b6265718b
@@ -88,9 +88,9 @@ entries:
8888
dgraph:
8989
- apiVersion: v1
9090
appVersion: "1.0"
91-
created: "2024-11-22T01:48:35.067926+05:30"
92-
description: Helm chart for deploying mysql datastore
93-
digest: 12e65afdeb0e978646912a72ba3485f118b6c5a86a760aa3b50f59a4de385cbb
91+
created: "2024-11-29T10:36:43.783016+05:30"
92+
description: Helm chart for deploying dgraph datastore
93+
digest: 81cd012d3d9b7a4b5275d4e0bc16f15cf4c4636eee17d7177c124c37c3f70a34
9494
icon: https://zop.dev/logo.png
9595
maintainers:
9696
- name: ZopDev
@@ -102,7 +102,7 @@ entries:
102102
mysql:
103103
- apiVersion: v1
104104
appVersion: "1.0"
105-
created: "2024-11-22T01:48:35.068266+05:30"
105+
created: "2024-11-29T10:36:43.783298+05:30"
106106
description: Helm chart for deploying mysql datastore
107107
digest: d1b0b8aff145de7076aa97054be6da52e769ac7be00d8453500a75ac82cc0d07
108108
icon: https://zop.dev/logo.png
@@ -116,7 +116,7 @@ entries:
116116
opentsdb:
117117
- apiVersion: v1
118118
appVersion: "1.0"
119-
created: "2024-11-22T01:48:35.06864+05:30"
119+
created: "2024-11-29T10:36:43.78352+05:30"
120120
description: Helm chart for deploying opentsdb
121121
digest: fd3473ad09c60da40c8ddbb319a4c015774d0ae35c0e7da5556949bcbde39f7e
122122
icon: https://zop.dev/logo.png
@@ -130,9 +130,9 @@ entries:
130130
postgres:
131131
- apiVersion: v1
132132
appVersion: "1.0"
133-
created: "2024-11-22T01:48:35.070885+05:30"
133+
created: "2024-11-29T10:36:43.783752+05:30"
134134
description: Helm chart for deploying postgres datastore
135-
digest: cdfce1e3b8dc786b74ca6cc2bd7fd386c72a1a07bdabdcb076d3e7e60bfdfe93
135+
digest: 6e8a630281561184374d252a30f3541faa49fed00d072d4e0b37b4363b1bdc7b
136136
icon: https://zop.dev/logo.png
137137
maintainers:
138138
- name: ZopDev
@@ -144,9 +144,9 @@ entries:
144144
redis:
145145
- apiVersion: v1
146146
appVersion: "1.0"
147-
created: "2024-11-22T01:48:35.071181+05:30"
147+
created: "2024-11-29T10:36:43.784162+05:30"
148148
description: Helm chart deploys redis instance
149-
digest: 7cec8d22d8ef375d62aa6af85fd794d548eab75a1829e416fbe4d34e98fca473
149+
digest: a1181c8d8c0808bfcbcd59a7ba08d675f83285221fff6fa10bc3fbc6014305e2
150150
icon: https://zop.dev/logo.png
151151
maintainers:
152152
- name: ZopDev
@@ -158,10 +158,24 @@ entries:
158158
service:
159159
- apiVersion: v1
160160
appVersion: "1.0"
161-
created: "2024-11-22T01:48:35.075725+05:30"
161+
created: "2024-11-29T10:36:43.789027+05:30"
162+
description: Helm chart creates a deployment, service, hpa for a service along
163+
with serviceMonitor etc
164+
digest: c5793cb3415ae0b68cfdc44fb9927ce68f0f4b77e50c7ab3cef610ed5d1cb98e
165+
icon: https://zop.dev/logo.png
166+
maintainers:
167+
- name: ZopDev
168+
url: zop.dev
169+
name: service
170+
urls:
171+
- https://helm.zop.dev/service-v0.0.7.tgz
172+
version: v0.0.7
173+
- apiVersion: v1
174+
appVersion: "1.0"
175+
created: "2024-11-29T10:36:43.788516+05:30"
162176
description: Helm chart creates a deployment, service, hpa for a service along
163177
with serviceMonitor etc
164-
digest: 13ae037d5149d0d6826aa16f08696d6db5db507fd1657d43e3ca5320f8c50f9a
178+
digest: b45dd74d7722d961d949102c81b2321ff1d575c3e94fbd9bf5aca9e328626d49
165179
icon: https://zop.dev/logo.png
166180
maintainers:
167181
- name: ZopDev
@@ -172,7 +186,7 @@ entries:
172186
version: v0.0.6
173187
- apiVersion: v1
174188
appVersion: "1.0"
175-
created: "2024-11-22T01:48:35.075237+05:30"
189+
created: "2024-11-29T10:36:43.787959+05:30"
176190
description: Helm chart creates a deployment, service, hpa for a service along
177191
with serviceMonitor etc
178192
digest: 0d10278e951800d9b46a1415e090c62ff642ecbdc0f181fba617bf273799114a
@@ -186,7 +200,7 @@ entries:
186200
version: v0.0.5
187201
- apiVersion: v1
188202
appVersion: "1.0"
189-
created: "2024-11-22T01:48:35.07454+05:30"
203+
created: "2024-11-29T10:36:43.786217+05:30"
190204
description: Helm chart creates a deployment, service, hpa for a service along
191205
with serviceMonitor etc
192206
digest: f405204dd81300e58188ca5d41efbd6ea3f1b8f08bd50d65ea95000d38edc517
@@ -200,7 +214,7 @@ entries:
200214
version: v0.0.4
201215
- apiVersion: v1
202216
appVersion: "1.0"
203-
created: "2024-11-22T01:48:35.074116+05:30"
217+
created: "2024-11-29T10:36:43.785776+05:30"
204218
description: Helm chart creates a deployment, service, hpa for a service along
205219
with serviceMonitor etc
206220
digest: f31132842aca2478c10457f6e323ffa566cca222afc58996d42a08f6f87a121e
@@ -214,7 +228,7 @@ entries:
214228
version: v0.0.3
215229
- apiVersion: v1
216230
appVersion: "1.0"
217-
created: "2024-11-22T01:48:35.073639+05:30"
231+
created: "2024-11-29T10:36:43.785117+05:30"
218232
description: Helm chart creates a deployment, service, hpa for a service along
219233
with serviceMonitor etc
220234
digest: cc7992d670d615549c67717904238998780abe5aa5df400e4e3eb31d16237ea4
@@ -228,7 +242,7 @@ entries:
228242
version: v0.0.2
229243
- apiVersion: v1
230244
appVersion: "1.0"
231-
created: "2024-11-22T01:48:35.071656+05:30"
245+
created: "2024-11-29T10:36:43.784593+05:30"
232246
description: Helm chart creates a deployment, service, hpa for a service along
233247
with serviceMonitor etc
234248
digest: e45d41b5041d8a3649bb8db768226990b2aae21b31b13ffd18d7253fe1e1d441
@@ -243,9 +257,9 @@ entries:
243257
surrealdb:
244258
- apiVersion: v1
245259
appVersion: "1.0"
246-
created: "2024-11-22T01:48:35.07597+05:30"
260+
created: "2024-11-29T10:36:43.789301+05:30"
247261
description: Helm chart for deploying surrealdb
248-
digest: 1263f1a2abfd12302c9cc8850c40a91ab41ebb4a02ca6aefd62d9a45f26a9e61
262+
digest: 3dc8d5151d6a8b5a96dc3b7aabb8e575e4c5298f0eef30943b44f74f0892bd38
249263
icon: https://zop.dev/logo.png
250264
maintainers:
251265
- name: ZopDev
@@ -254,4 +268,4 @@ entries:
254268
urls:
255269
- https://helm.zop.dev/surrealdb-v0.0.1.tgz
256270
version: v0.0.1
257-
generated: "2024-11-22T01:48:35.064007+05:30"
271+
generated: "2024-11-29T10:36:43.776501+05:30"

docs/service-v0.0.7.tgz

7.81 KB
Binary file not shown.

0 commit comments

Comments
 (0)